PT-2022-22085 · Git +1 · Tooljet +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue allows for account takeover. When an attacker gains access to certain information, they can see the hashed password, which can potentially be...

PT-2022-17884 · Mediatek +1 · Mt6580 +1

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: In telephony, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local escalation of privileg...

PT-2022-28228 · Etcd · Etcd

Name of the Vulnerable Software and Affected Versions: etcd affected versions not specified Description: The issue occurs when an etcd instance attempts to perform service discovery and a cluster size is provided as a negative value, causing the etcd instance to panic without recovery...

PT-2022-6066 · Cisco · Cisco Ata 190 Series Analog Telephone Adapter

Name of the Vulnerable Software and Affected Versions: Cisco ATA 190 Series Analog Telephone Adapter affected versions not specified Description: A vulnerability in the Cisco Discovery Protocol functionality could allow an unauthenticated, remote attacker to execute arbitrary code on an affected...

PT-2022-36662 · Git +1 · Mapserver

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow WRITE 1 crash has been reported. The crash involves the functions msyylex, loadMapInternal, and msLoadMap. No information is...

PT-2022-4954 · Omron · Cx-Programmer

Name of the Vulnerable Software and Affected Versions: Omron CX-Programmer versions 9.78 and prior Description: The issue is related to an Out-of-Bounds Write, which may allow an attacker to execute arbitrary code. This is due to a buffer overflow vulnerability in the CX-P.exe executable file,...

PT-2022-25494 · Unknown · Phpuploader

Name of the Vulnerable Software and Affected Versions: php uploader affected versions not specified Description: The issue is related to an arbitrary file upload vulnerability. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2022-36658 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state includes functions such as cli js parse done, cli html normalise, and html...

PT-2022-21885 · Autodesk · Moldflow Synergy +2

Name of the Vulnerable Software and Affected Versions: Moldflow Synergy affected versions not specified Moldflow Adviser affected versions not specified Moldflow Communicator affected versions not specified Advanced Material Exchange affected versions not specified Description: A maliciously...

PT-2022-36661 · Exiv2 · Exiv2

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to a heap buffer overflow error. Technical details about the error include a crash type of Heap-buffer-overflow WRITE and a crash state involving functions such as...

PT-2022-21889 · Autodesk · Autodesk Dwg

Name of the Vulnerable Software and Affected Versions: Autodesk DWG affected versions not specified Description: A maliciously crafted Dwg2Spd file, when processed through the Autodesk DWG application, could lead to a memory corruption issue due to a write access violation. This issue, in...

PT-2022-36659 · Git +1 · Haproxy

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 1 crash has been reported. The crash occurs in the parse line function, which is called by readcfgfile in the fuzz cfg parser...

PT-2022-21892 · Autodesk · Designreview.Exe

Name of the Vulnerable Software and Affected Versions: DesignReview.exe affected versions not specified Description: A maliciously crafted PCT or DWF file can cause a memory corruption issue due to a read access violation when consumed through the DesignReview.exe application. This issue, when...

PT-2022-36657 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the AffixMgr::cpdcase check and AffixMgr::compound check functions, ultimately calle...

PT-2022-37427 · Unknown · Parity-Wasm

Name of the Vulnerable Software and Affected Versions: parity-wasm affected versions not specified Description: The parity-wasm software has been explicitly deprecated. The author recommends switching to wasm-tools. Recommendations: At the moment, there is no information about a newer version tha...

PT-2022-36655 · Git +1 · Upb

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash, specifically a Segv on an unknown address. The crash involves the functions upb MiniTable SetSubEnum, upb MessageDef...

PT-2022-37328 · Exiv2 · Exiv2

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: A heap-buffer-overflow read issue has been identified. The crash occurs in the Exiv2::QuickTimeVideo::userDataDecoder and Exiv2::QuickTimeVideo::tagDecoder functions. Recommendations: At the...

PT-2022-18578 · Unknown · Octopus Deploy

Name of the Vulnerable Software and Affected Versions: Octopus Deploy affected versions not specified Description: The issue allows bypassing rate limiting on login using null bytes. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2022-36656 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to an index-out-of-bounds crash. Technical details about the crash include the function names ahd interpolate r and b in rgb and convert to cielab, ahd interpolate, and...

PT-2022-36654 · Git +1 · Skia

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the SkRect::setBoundsCheck, SkEdgeClipper::clipCubic...